Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/0a669a1c-9f66-3814-939f-990c4560c48c.roa
File:                     0a669a1c-9f66-3814-939f-990c4560c48c.roa (raw, json)
Hash identifier:          USvNBp4pXfmXS5Rg4sfJgfRjeHhgr/pYWy4Mh48zlTk=
Subject key identifier:   FF:5B:53:AE:16:21:6B:5B:6A:9E:06:F3:F2:D9:6C:04:CB:0A:57:AB
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F43285848977091A66F4AEF1EE829C080
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/0a669a1c-9f66-3814-939f-990c4560c48c.roa
Signing time:             Sun 19 Jan 2025 02:00:39 +0000
ROA not before:           Sun 19 Jan 2025 02:00:39 +0000
ROA not after:            Sat 19 Apr 2025 01:00:39 +0000
asID:                     11377
IP address blocks:        159.183.34.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:97:70:91:a6:6f:4a:ef:1e:e8:29:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Jan 19 02:00:39 2025 GMT
            Not After : Apr 19 01:00:39 2025 GMT
        Subject: CN=b04a21b4-dc30-42bd-b495-f9834857186a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7d:2f:e0:77:0d:22:9d:a3:a0:dd:06:9f:62:
                    b2:55:52:ba:d1:ec:7c:5e:12:2d:e5:64:aa:9b:e5:
                    59:cd:0e:98:f1:04:87:2b:c6:48:19:90:05:95:9a:
                    ed:e5:ab:93:17:a3:e0:f5:ae:33:b1:b5:26:8b:6b:
                    89:a8:2b:02:16:a2:15:aa:d1:d1:7d:b8:f3:cf:e9:
                    e4:2e:e5:c4:77:57:b6:90:56:ea:a9:3c:80:18:d4:
                    6f:42:88:0a:d6:f5:d2:a6:98:f9:29:e7:d9:23:47:
                    2a:c5:f7:ae:bc:17:97:dc:27:21:7a:22:b0:16:4d:
                    82:8b:81:24:ef:bc:d8:1d:27:99:50:69:eb:15:a6:
                    d9:73:54:a0:54:7e:d7:19:b3:98:6b:10:80:1a:d4:
                    23:9a:7b:c5:81:c0:e1:ab:27:79:04:05:35:04:8c:
                    28:b0:b0:2f:e7:4d:f4:6c:f0:17:01:6a:fc:67:1c:
                    25:9e:55:31:31:d1:8c:c4:f6:89:28:a6:68:6b:90:
                    4d:3d:16:6f:0e:c8:6e:92:43:b8:f9:fb:ba:7e:2f:
                    d2:e9:63:42:2c:8f:84:f8:ca:d1:26:35:d9:fc:d2:
                    5d:43:1f:02:85:4b:c9:dc:c6:51:83:80:58:d1:41:
                    06:77:40:15:5f:ea:a4:e2:b3:50:4a:4b:03:82:21:
                    9c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5B:53:AE:16:21:6B:5B:6A:9E:06:F3:F2:D9:6C:04:CB:0A:57:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/0a669a1c-9f66-3814-939f-990c4560c48c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.183.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:03:58:a7:46:40:e6:0f:57:86:32:e6:07:be:af:71:22:ad:
         c0:e2:ce:cf:27:bc:b7:42:23:00:83:e7:a8:c3:28:fa:7c:0e:
         21:40:fe:0a:93:df:a3:bf:9d:c3:3b:a8:36:e6:88:03:b0:9d:
         8b:05:5e:1b:69:57:a4:01:a8:ce:18:17:2d:73:6e:cf:d9:ba:
         1f:bc:d2:f4:0d:a4:5a:fd:6d:f5:cc:47:ef:51:f9:fc:40:e3:
         ba:ce:91:40:18:80:eb:d7:07:eb:fa:c9:5f:0b:28:b6:60:e4:
         5b:92:3c:dc:ff:30:af:a8:57:a0:bd:d3:bb:f1:de:37:c2:bd:
         40:e8:c4:04:35:a2:6a:2c:de:cc:01:b4:87:04:8d:3e:9e:00:
         b2:7f:90:4b:b6:34:55:24:68:d9:2f:c7:ae:06:33:d6:5e:ab:
         1e:ae:8e:a9:fc:fa:f7:c9:e5:e2:6b:24:db:c2:ae:a0:9b:2b:
         6b:57:af:c0:5e:67:37:e9:9e:ea:6d:fa:40:e3:aa:49:ca:20:
         2d:b6:78:72:16:9e:b1:e1:48:1b:f4:b7:d0:31:86:fe:e5:08:
         72:9c:fe:3a:41:16:19:a6:19:0e:eb:9e:90:38:38:cd:78:1e:
         bc:4c:32:16:be:c4:dd:92:ad:d3:56:dd:12:e9:e8:c4:e8:e0:
         c2:e9:9e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:13:08 2025 by rpki-client